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1. Introduction 

Efficiency of quantum algoritlim, e.g. speed-up, over its classical counterpart can 
be found typically in two algorithms: factorization of large numbers and database 
search. Shor's algorithm^ solves the former problem with exponential efficiency com- 
pared to its classical counterpart, while Grover's algorithm (GA)^"'' solves the latter 
with quadratic efficiency. GA has been a fascinating one to be implemented, since 
a lot of informational problems are translated into the database search problem, in 
spite of its moderate speed-up. 

There are two different classes in the database search problem. One is a purely 
information theoretic problem such as satisfiability problem, where a Boolean func- 
tion / is given and bit strings satisfying / should be identified. The other is a 
rather practical unstructured database search problem, e.g. to find the owner of a 
telephone in a telephone directory, given a phone number, as stated in Ref. 2. It 
should be stressed that, in contrast to the former, the player is allowed to know 
what should be searched (the owner of a telephone) in advance in the latter case 
and searches the target under the reference of this information. We focus on the 
latter situation in this paper, motivated by the fact that many experimental demon- 
strations and proposals of implementation of GA^"^^ implicitly assume the latter 
situation. Also, these implementations so far focus only on GA with a single target 
and there seems no systematic construction of a quantum circuit implementing GA 
with multiple targets. The detailed analysis of the circuit complexity has not been 
presented for this case. 

In this paper, by a simple way, we provide a systematic construction of quantum 
circuits which implements GA with multiple targets. First, we propose a unitary 
operator which replaces the conventional oracle operator of GA (Theorem 1). We 
show that the construction of a quantum circuit of our oracle operator amounts 
to implementing a unitary operator which yields an equal weight superposition 
state of the target states from |0)®". Utilizing the dichotomy on each bit in the 
target sequences, we obtain a simple recursion relation with which the quantum 
circuit of the unitary operator is designed (Lemma 2 and Theorem 2). Also, we 
propose another database search method (Theorem 3), in which circuit complexity 
is reduced considerably (Proposition 2). Hence, the present systematic and explicit 
'algorithm' to build the oracle in the quantum search enables us to estimate the 
circuit complexity. 

This paper is organized as follows. In Sec. 2, we show the equivalence between 
the proposed oracle operator and the conventional one. Quantum circuit design of 
the former one and its analysis from the viewpoint of the circuit complexity are 
provided in Sec. 3 and possibility of further reduction of the gate complexity is 
discussed in Sec. 4. Simple examples are given in Sec. 5. Section 6 is devoted to 
conclusion and discussions. 
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Fig. 1. Quantum circuit for the invorsion-about-mcan operator D. Gate H denotes Hadamard 
transformation given in Eq. I I28I1 . 

2. Equivalent Quantum Algorithms 

Consider a database which consists of 2" elements each of which is labeled by 

n-l 

x:=Y,xa\ (1) 

i=0 

where £ {0, 1} for all i. The set of all labels is denoted by TV := {0, 1, . . . , 2" - 1}. 
A nonempty subset 5* of A'' is made of the set of the targets of the database search 
problem. We further introduce the complementary subset S := N\S. Utilizing the 
binary representation ([1} of x, we can represent each element a; g A^ as an n-qubit 
normalized quantum state in H := {S)"=i with Hi = for all i, 

\x) :== \x„-l}l ® \Xn^2)2 «>■■■«) \xo)n, \x„-t)t G Hi, (2) 

where 

n — i {Xi\yi) n—i — ^XiUi^ Xi^lji (E {0, 1} 

for all i and \xi)n-i G 'Hn-i is a normalized eigenvector of the Pauli matrix CTz 
with the eigenvalue (—1)^'. Note that the set | x € A^} constitutes a complete 
orthonormal basis in Ji. Let 

be the uniform superposition of all the basis vectors of H, where \A\ denotes the 
cardinality of a set A. The state j?/') is the initial state in GA. 

Let us define two unitary operators essential for GA, the inversion operator D 
with respect to the mean and the conventional oracle operator Oconv('S'), respec- 
tively, as 

i?:=-l«" + 2|V.)(V^|, (4) 

and 

Oeonv(5) :=l«"-2^|a-)(x|. 
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where 1 is the identity operator on C^. Note that the oracle operator Oconv('5') 
distinguishes the targets in the set N as 



Oconv(5')|a;) 



— \x) X e 5, 
\x) X £ S 



Then, measurements of the state 

|V'('=)> [DO^onAStli^) (5) 



with k w 0(-\/|iV|/|S'|) yield elements of S with high probability''"^. Figure [T] shows 
a quantum circuit which implements D. 

Although the oracle operator Oconv(>S') has been utilized as a de facto standard, 
we introduce another oracle operator. Let \S) be 

\S):=\Sr^'Y.\^) (6) 

and define 

0(5) 1®"-2|S')(S'|, (7) 

which distinguishes the targets from the others and plays the central role in the 
present work. The operator 0{S) replaces Oconv('S') as we show next. 

Let us first show that the action of 0{S) is equivalent to that of Oconv('S') on 
the specific state in Eq. ([3]). To this end, we prove 

Lemma 1. The state |0) Cz 71 is an element of the kernel of 0{S) — Oconv('S') if 
and only if |0) can be written as 

\q^)^c\S} + Y,cM, 
Ker[0(5)-0eonv(5)] =Cl^l+i. 

be any vector in H. Then, we find 

O(5)|0) = 10) -2151-1/2 ^,^15) 

and 

Let 10) be an clement of the kernel of 0{S) — OconviS), that is, 

(y|[0(5) -Oconv(5)]|0) =0 



which implies 



Proof. Let 
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for all y & N. Then we obtain for any z € S 

from which we find 

|(/.) eKer[0(5)-0eonv(5)] 10) =c|5) + ^c,|x), 

where c is the common coefficient of |a;), a; £ 5, in The converse is trivial. □ 

At this stage, we note that, introducing real parameters tpi; and the state \S) 
constructed by the same fashion as in Eq. the state j^C'')) can be rewritten as 

=sin(^fc|5)+cos(^fe|5) 

as shown in Ref. 4. Thus, we immediately find 

Corollary 1. The actions ofO(S) and Oconv{S) on l^p^''')) result in the same state: 

0(5)|^('=)) =Oco„v(^)|V'^'=)) 

for any positive integer k. 

Since this Corollary is valid for all k e N, we may replace all actions of Oconv('5') 
by 0{S) during the iteration processes in GA. Hence, we conclude that 

Theorem 1. Grover's algorithm can be realized by the iterations of DO{S), that 
is, 

IV^'^') = [DO{S)f\i,). 

This theorem suggests non- uniqueness of the way to realize quantum information 
processing. 

3. Building Quantum Circuits by Dichotomy 

We turn into an explicit and systematic construction of the oracle 0{S) via ele- 
mentary quantum gates. The key observation is that 0{S) is unitarily equivalent 
to a conventional oracle operator in GA with a unique target |0)®" S T-L. Let 

P:=l®«-2(|0)(0|)®" 

be this conventional oracle operator and define U (S) by 

|5) = C/(5)|0)®". (8) 

Then we find that 0{S) and P are related by U{S) as 

0{S) = U{S)PU{Sy, (9) 

which can be interpreted as a decomposition of 0{S) in terms of U{S) and P. 
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Fig. 2. Quantum circuit for P. 



We address two features of the decomposition ©• First, the unitary operator 
U{S) in Eq. ^ is not uniquely determined since it does not specify how basis 
vectors other than |0)®" are mapped under U{S). Thus, we define a set S{S) whose 
elements are U[S): 

S{S) {U{S) I 1^) ^ t/(^)|0)®"} ~ U(2" - 1), 

which has (2" — 1)^ free parameters. Second, since the construction of D and P from 
the universal gate set (local unitary operators and CNOT gates) has been clarified 
in Refs. 7 and 10 (See Fig. [2|), the construction of quantum circuits for GA boils 
down to that of U{S). Note that from Fig. [2] and Ref. 17, the circuit complexity 
for P is at most O(n^). Utilizing the operator P, we also find a circuit diagram of 
the conventional oracle Oconv('S') with the universal gate set as a biproduct, which 
is given in Appendix. 

To proceed, let us classify elements of S by dichotomy on the value of each bit. 
Prior to this, let us define, for a given x £ N, 

rn 

„(m) — \ " ^ nm-i 
i=l 

for an integer m — 1, 2, . . . , n, which can be embedded in Hi as a normalized 

vector 

|a;(™)) := |x„_i)i (g) \Xn~2)2 ' ' ' |a;„-m)m- 

This vector \x^™^) is constructed by picking up the first m bits of the binary rep- 
resentation of X and utilizing the correspondence similar to Eq. ([2]). Note that 
= X. We introduce two types of subsets of S with a help of x'^™': One is 

5™(a™):={x|a;(")=a™,a;e5} (10) 

for m = 1,2, ... ,n and a,„ = 0, 1, . . . , 2™ — 1. The other results from the dichotomy: 

S,n+l{h(Xm) := {x\Xn-m-l =i,X€ S',„(a,„)}, 

for i = 0,1 and m = 1, 2, . . . , n — 1. 
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Next, wc focus on relations between the cardinalities of the above two sets 
Smic^m) and Sm+i(i,am)- The following three identities are easy to verify: 

\S,n{0)\ + \S,n{l)\ + ■■■ + |5„(2™ ~ 1)1 = \S\, (11a) 
|S'm+i(0,a„)| + \Sm+i{l,am)\ = |S'm(am)|, (Hb) 

\Srn+lii,C(m)\ = | S'm+1 (2q;„ + i) | . (llc) 

We can formally introduce a "probability" distribution {pm{oim)}^^^Q 

r, (n \ ■— \^rn{Cim)\ —01 9'" _ 1 

Pm \S^m } ■ — 5 Q^m — U,i,...,Z 1, 

from Eq. (jllap . and a conditional probability distribution {pm+i{i\ctm)}i=o,i 
Pm+i(i\am) — rrr-T r, — , i = 0, 1 

\Om[am)\ 

from Eq. (jllbp . Note that Eq. (fTTc)) implies 

P7yi+l{i\am)Pm{am) = Pm+l{2a„i + i) ■ (12) 

Let Am be a set satisfying 

Am ■= {am I Sm{a„i) ^ 0}- 

Then, we have 

Pm(am)=0 for a„i ^ Am- (13) 

We show a recursion relation to construct U(S). First, on the basis of the above 
probability distributions, we define two kinds of unitary operators on by 



Vi := VM0)1 - ^VM^<^y (14) 

and 



Vm+l{am) = \/pm+liO\am)i - i V^Pm+l (1 1 am)o-y , (15) 

for am G Am, whereas we define Vm+iiam) = 1 for q„i ^ Am- These one qubit 
unitary operators are followed by unitary operators 

Ui ■-= Vi ® 

and 

Um+iiam) \am){am\ ® Vm+i{am) ® 

+ (l®™-|a„)(a™|)®l®("-™), (16) 

respectively. Here, \am) is a normalized vector in x ^« constructed from am 
by the same way as Ix'™-*). Note that the elements of the set {Um+iiam)}a^ are 
commutative with each other: 

[Um + liam), Um+liPm)] = 0. 
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Following this, let us define 

2'"-l 2"*-! 

Ura+i:= n Um+i{am)^ ^ | F^+i ® l^^""™"!) (17) 

Qm=0 Qm=0 

for m = 1, 2, . . . , n — 1. Operators Um+i are nothing but uniformly controlled gates 
introduced in Refs. 18 and 19. Then, we have 

Lemma 2. 

[/™+iC/™---[/i|0)®"= Vp™+i(am+i)|a™+i) ® |0)®("-"-i) (18) 

/loMs /or m = l,2,...,n — 1. 

Proof. Wc prove this claim by induction. For m ~ 1. we can easily check the 
validity of Eq. ^TE\\ . Next, suppose that Eq. (fT8|) holds for m = fc — 1. Then using 
Eqs. ini), (US]), ^ and ([12]), we obtain 

ak=0 



^ ^ y/pk+i{2ak+i)\ak) ® |z) |0)«("-^--i' 



We find Eq. (fT8|) with m = fc by introducing afc+i = 2afe + i and |afc+i) = \ak) 1 «), 
since the probability distribution pk^i{2ak + «) is normalized by Eq. (|12p . This 
completes the proof. □ 

Let us construct 

U C/„C/„_i • • • C/i, 
whose action on |0)®" is found from Lemma 2 as 

f/|o)®" = ^ vp4^|x). 

Since 



Pn(2:) 



for X e S, 
\S\-^ for a; e 5 
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Fig. 3. Quantum circuit of the unitary operator U{S) for n = 3 in terms of a one-qubit gate Vi 
and controlled gates Um+l{ctm)- The one-qubit gates Vm+lictm) act on the m + 1-th qubit if the 
state of the control qubits has a non- vanishing support on | Qm ) ■ 



is valid, we observe 



U\0)^" = \S\-^/^Y.\x) = \S}, 



which manifestly proves 

Theorem 2. The operator U = UnUn-i ■ ■ - Ui belongs to S{S), that is, 

U e S{S). 

Thus, hereafter we may put 

U = U{S), 

whose quantum circuit is given in Fig. [3l 

To close this section, let us estimate circuit complexity of U{S)^ i.e., the number 
of elements in the universal gate set necessary to emulate U{S). This is done by 
noticing 

An = S, (19) 

which leads us to 

Proposition 1. The circuit complexity ofU{S) has an upper bound 0(71^151/6). 

Proof. Consider an element a„ € A„. Then, there exists an appropriate doublet 
(a„_i, i) satisfying 

a„ = 2a„_i + i. 



Using Eqs. (jllbj) and (jllc|) . we find that the existence of such a doublet implies 
a„_i € An-i, which means that the operator (|15p is well-defined and might be non- 
trivial. Since this is true for all elements in An, from Eqs. and p^ . we obtain 
an upper bound \S\ for the number of non-trivial [/„(a„). Also, by induction, we 
find that l^l also becomes the upper bound of the number of the non-trivial UmicXm) 
for any m. 

Combining this bound j^l with the fact that one-qubit unitary gates with m 
control qubits can be emulated by O(m^) elements of the universal gate set^"^, we 
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have an upper bound C'(m^|S'|) on the gate complexity of Um+i- Summing up 
them from m = 1 to to = n — 1, we find the upper bound 0{n^\S\/6) for the circuit 
complexity of U{S). □ 

We address that this bound is not so tight, since for the derivation of this bound 
we have not taken into account the possibilities that Pm+i(l|am) = for «,„ S A^^, 
which implies that Um+i{am) becomes the identity operator. 

4. Reducing the Circuit Complexity 

Following the results in the previous section, let us present another construction of 
the quantum circuit and estimate its circuit complexity. For this purpose, we define 
a set S by 

5 = {0,1,...,|5|-1} 

which is related to the given S by an appropriate element a of the symmetric group 
6|Ar|, that is, 

<tS = S. (20) 

Note that \S\ = \S\. We define \S) and 0{S) by replacing S with S in Eqs. 1^ and 
([7]), respectively. Also note that <t satisfying Eq. ([20)) is not uniquely determined 
since we do not specify how elements in S are mapped under a. 

Let tTct be an | A'^j-dimensional unitary representation of a. Then we observe 

Theorem 3. Grover's algorithm to amplify the target state 15*) can be realized by 
the invocations of the oracle 0{S), that is, 

\i,^''^)^7TADO{S)M\i,). (21) 

Proof. By the definition of S and cr, there exists a unitary operator tt^ satisfying 

TT„U{S) G 5(5), 

which implies 

7r^|5) = \S) and tt^O{S)ttI = 0{S). 

Since \^p) in Eq. ([3]) is manifestly a one-dimensional symmetric representation of 
6|jv|, we obtain, by taking Eq. (jlj into account, 

T^r\lp) = IV') 

and 

for all T G ©|Ar|. Then, we observe 

DO{S) =tt^DO{S)ttI. 
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Using 7rJ.7rcr = l"^", wc find 

7TADO{S)M\i,) = [7T,DO{S)7Tlf\i^) = [DO{S)n^) = I^W), 
which completes the proof. □ 

4.1. Construction of 0{S) 

Since one can learn from the above theorem that amplification of \S) can be per- 
formed by the invocations of the oracle 0{S), let us investigate detailed properties 
of 0{S) from the viewpoint of circuit complexity. For this purpose, it is convenient 
to introduce a number I g Z satisfying 

; - 1 < iog2 1^1 < /, 

which is the minimal number of bits required for binary representation of all the 
elements of S. Thus, the n-bit representation ^ of each label of the element x & S 
should be 

Xl = Xl+i = ■ ■■ = Xn-l = 0. 

Then, from Eq. ([10]), we find 



Sm{a„i) 



S forQ!„i = 0, 
otherwise 



for m = 1, 2, . . . , n — Z + 1. Thus, if we employ the construction of U{S) introduced 
in the previous section, we observe from Eqs. (|14p and psp that 

Ui = U2 = --- = Un-i^ 1^" (22) 

for S. This implies that the circuit complexity of U (S) is considerably less than 
that of U (S) for generic S. 

Remarkably, there exists further reduction of the circuit complexity as we will 
show now. First, we fix notation. Associated with the subscript m in Eq. ([TO]) , we 
employ a shifted index m' :— m— (n^l). A normalized vector \am') G ^'iLn-i+i 
is defined by a similar manner to \am); where = 0, 1, . . . , 2™ — 1. 

Next, for a given \am) with m > n — I, wc seek jam') satisfying 

= |0)i ® |0)2 ® • • • ® \0)n-i <E) \a,n')- (23) 

Depending on a type of the solutions of Eq. ([23]), we prepare a controlled unitary 
gate, U!^_^_i{am)' (i) If there exists \am'} satisfying Eq. ([23]) for m' > 0, then 

UL+iM ® \a,n'){a,n'\ ® V„^+i{a^) ® l®("-'"-i) 

+ <^ (^1®™' _ |a,„.)(am'|) ® 1®("-™). (24a) 

(ii) If there exists jam') satisfying Eq. for m' = 0, then 

K+Mrn) ■■= ® Vm+l{ara) ® l^^'-'l (24b) 
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(iii) If there is no \am') satisfying Eq. (|23p . then 

UU+Mrn) (24c) 

Under these preparations, we find 

Lemma 3. The controlled gates Um+i{ctm) for S can be replaced with C^m+i(am) 
for m > n ~ I. 

Proof. Let us focus on the controUed gates ([T6| with m > n — I and consider the 
actions of U{S) on |0)®". Since we have Eq. we find that the first (n - I) 

qubits only play the role of the control qubits for Eq. p^ . Besides, since the initial 
state |0)®" is separable, these first {n — I) qubits remain unchanged under the 
actions of Eq. with m > n — I. This observation implies that the controlled 
gate (|16p for becomes trivial (1®") unless there exists an appropriate state 
|Q!,„') G ®1Ln-i+i which the vector of the control qubits |a„i) can be written 

as Eq. (1231). 

If |a,„) is written as Eq. (p3)) and hence the first n — I qubits are in the state 
|Q^(»(n-0^ these n — I qubits play no role as control qubits. Thus, we can replace 
[/,„+! (a,„) by [/,'„_|.i(a,„) as is claimed. □ 

Parallel to the previous section, we define 

2'"-l 

for m > n — I and 

Then, from the above lemma, we immediately see U' £ S{S). Thus, hereafter we 
reset 

U{S) = u'. 

We estimate the circuit complexity for this U{S). 

Proposition 2. The circuit complexity ofU{S) has an upper bound 0{P2^) . 

Proof. Obviously there remain m' qubits for each possibly non-trivial C^m+i(am) 
as free control qubits. Since we can place either |0) or |1) in each qubit in |am'): the 
number of non-trivial U^_^_i{am) is at most 2™ for each m. Also, the number of 
those control qubits in each [/,'„_|_]^(am) is manifestly m' . Thus, utilizing the results 
of Ref. 17, we estimate the circuit complexity of U{S) as 

(-1 

1+ y m'h"'' ^f2K 

rn' — \ 
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Fig. 4. (Color online) (a) Region of n and 7 satisfying F < 1. Here, F is defined as the ratio 
between the circuit complexity of Eq. l|2Hl and that of Eq. l(5j , and it can be regarded as a function 
of the number of qubits n and the parameter 7 characterizing the size of the set of the targets 
S. (b) Graphs of F with n = 10 (dashed line), n = 100 (dashed dotted line) and n = 1000 
(dotted line). In the region where F is less than unity, the algorithm Eq. I I21I1 dominates over the 
conventional algorithm Eq. l(5| from the viewpoint of the circuit complexity. 



4.2. Construction of Wa- 

Now, we turn to the implementation of the unitary operator tt^ in terms of the 
elementary gates. To this end, we first introduce 

B ■.= {x\xe S\{Sr\S)} and C := {x \ x e S\{S D S)} . (25) 

It immediately follows from \S\ = \S\ that 

\B\ = \C\ < \Sl (26) 

which implies that we can introduce a bijection between B and C. Based on this 
observation, we define a transposition (xy) for any pair x € B and y G C . Since 
these transpositions commutate with each other, a can be realized as a product of 
transpositions for all distinct pairs. 

Utilizing the methodology given in Ref. 17, which is based on the grey code and 
the Hamming distance, the quantum gate of such transposition is implemented with 
at most n controlled gates with n — 1 control qubits. Thus, the circuit complexity 
of the transposition is 0{n{n— 1)^) = 0{n?). Combining this observation and the 
inequality ([26| with the fact that we need \B\ transpositions to implement ct, we 
conclude that 

Proposition 3. The circuit complexity of tt^ satisfying Eq. i20\) has an upper 
bound 0{n^\S\). 



4.3. Circuit Complexity 

So far, we clarified the circuit complexity of each ingredient of Eq. (PT|). which 
further yields 
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Corollary 2. The order of circuit complexity to obtain ji/;''"")) by the algorithm I121\) 
is 

O {2n^\S\+2kn^ + 2kf2^) . (27) 

Proof. The first term in the argument of Eq. ((27|) comes from Proposition 3. The 
second term results from the fact that the circuit complexity of D and P is C(n^) 
and the total number of D and P in the r.h.s. of Eq. (|2ip is equal to 2k. Proposition 
2 and the number of U{S) in Eq. pip yield the third term. □ 



Let us compare the circuit complexity given by Eq. ^7} with that for Eq. ([5]) 
by setting k w Y^iV|/W|. For this purpose, it is convenient to introduce the ratio 



r 



2n^\S\ + 2 {n^ + P2') ^\N\/\S\ 



n^{\S\ + l)^\N\/\S\ 

where the numerator comes from Eq. (j27p and the denominator comes from the cir- 
cuit complexity 0{n'^\S\) of Oconv('5')- Note that the circuit complexity of Oconv(»S') 
cannot be improved even if we employ the method introduce in this section (See 
Appendix). From the viewpoint of the circuit complexity, we conclude that Eq. ([21]) 
dominates when F < 1. Recalling \N\ = 2", \S\ = \S\ < 2} and introducing a ratio 
7 := Z/n, the ratio F is approximated as 



F 



^2-t(i-'/) + (2-"T + 72) 



If 7 is fixed and we take the limit n — >■ oo, we obtain F 
that the algorithm (PT|) is preferable if 7 satisfies 

1 



27^ from which we find 



7 < 



V2 



0.71. 



Further, Fig. |4] tells us that the above bound 7 = l/v2 is universal if the num- 
ber of qubits is sufficiently large. Thus, we may conclude for a sufficiently large 
database that the proposed algorithm is preferable than the conventional one from 
the viewpoint of the circuit complexity, provided that the number of the target 
satisfies 



\S\<\N 



0.71 



5. Examples 

In this section, we give two simple examples to demonstrate the difference between 
the implementations of C/(S') and U{S). For brevity, we utilize the binary represen- 
tations to describe the elements of sets 5", S and the sets derived from them. For 
the later convenience, we also introduce a one-qubit gate 
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1 



VAO) 



1 



V3{0) - 



Fig. 5. Quantum circuit of U (S) for S given in Eq. I|29|l . The explicit form of the one-qubit gates 
Vi, 1/2(0) and V3(0) are given in Eqs. ll30t . JSTJ and 13211 , respectively. 



Note that V\0) = H\0), where H is the Hadamard gate 



H 



(28) 



5.1. Circuit for U{S) 

As a demonstration of our algorithm to design the relevant quantum circuit, let us 
consider a database search problem to extract four three-bit strings 

S* = {000,001,010,100}. (29) 

The classification of whose elements according to the dichotomy yields 

S'i(O) = {000, 001, 010}, 51(1) = {100}, 

from which we find 

14 = ^ (V3 X 1 - iaj,) . (30) 
Further, from the dichotomy on the elements in 5i(0) and 5*1(1), we obtain 

5*2(0,0) = {000,001} £'2(1, 0) = {010}, 
^2(0,1) = {100}, 52(1, 1) = 0, 

respectively. These enable us to construct 

1/2(0) = (\/2 X 1 - icTy) and ^2(1) = 1. (31) 

By the same way, we find 

^3(0,0) = {000}, 53(1,0) = {001}, 
53(0,1) =={010}, 53(1, l)-0, 
53(0,2) = {100}, 53(1, 2) = 0, 
^3(0, 3) = 53(1, 3) =0. 
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1 



1 



Vs{0) 



Fig. 6. Quantum circuit of U(S) for S given in Eq. I I33I1 . The explicit form of the one-qubit gates 
V2(0), V3(0) and V3(l) are given in Eqs. Il34|l and l|36| l. Merging the second and third control 
gates, this circuit turns into a gate composed from two one-qubit gates. 



Based on these sets, we have 

^3(0) = V, Vsil) = ^3(2) = ^3(3) = 1. 

These results are summarized as the quantum circuit depicted in Fig. [5l 



(32) 



5.2. Circuit for U{S) 

From the given set S in Eq. ([29| . we construct the set S as 

S = {000,001,010,011}. 
By the same method utihzcd in the previous subsection, wc find 

Vi = 1 

as is expected from Eq. (P^ . Also, further dichotomy reveals 

^^2(0) = V^iO) = ^3(1) = V, 
V2{1)^V3{2) = V3{3) = 1. 

Thus, the non-trivial Um+iic^m) arc found from Eq. (|16|) as 

U2{0) = (|0)(0|®1/+|1)(1|®1)(8 1, 
UsiO) = |00)(00|®y+(l®2- |00)(00|)(8)1, 

Usil) = |oi)(oi|®y + (i®2- |oi)(oi|)®i, 



(33) 

(34) 

(35) 
(36) 



by the help of the resolution of identity. On the other hand, following Eqs. (|24ap . 
(|24bl) and (pic]) , we introduce 

C/^(0) = 1 ® (|0)(0| (E>V+ |1)(1| (E) 1) , 
C/^(l) = 1 ® (|1)(1| (E)V+ |0)(0| (E) 1) . 
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Fig. 7. Quantum circuit of tt^ for the permutation I I37I1 . 



Then one can verify, by direct calculation, that 

c/3(i)c/3(o)c/2(o)io)®3 ^ u:,{i)umum\or', 

which is the key for the reduction of the circuit complexity. The quantum circuit 
obtained by this replacement is shown in Fig. |6l We further observe that 

c/;^(i)c/;^(o)c/^(o)|o)®3 = i«)t/«)y|o)®3 = ®7^|o)®^ 

which implies that our algorithm yields an intuitive way to produce \S). 

5.3. Circuit for tv„ 

For S and S in this section, we find 

B = {100} and C = {011} 

from Eq. ()25|) . Then, the permutation a associated with B and C is uniquely de- 
termined, and we find 

cr = (100 Oil). 

We design a sequence of bit strings from 100 to Oil so that the Hamming distance 
between the neighbours is equal to the identity, e.g., 

100,101,111,011. 

This sequence shows that the permutation operator tt^ is rewritten as 

(T = (100 101)(101 111)(111 Oil). (37) 

Since every transposition in the RHS of Eq. ((37)) is realized by a controUed- 
controlled-NOT gate, we can materialize tTo- as a quantum circuit of these controUed- 
controUed-NOT gates (see Fig.[7l). 

6. Conclusion and Discussions 

In this paper, we proposed a systematic construction and implementation of opera- 
tors suitable for demonstration of quantum database search algorithm in the sense 
of Ref. 2 with multiple targets. The operator 0(5*) is introduced for this purpose 



I 
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and it is proven that it works as an oracle for GA under a certain condition on the 
initial state (Theorem 1). Since the modified oracle 0(5) is decomposed into oper- 
ators P and U (S), where P is the conventional oracle operator with a unique target 
|0)®", we have shown that the quantum circuit of the oracle built by the elementary 
gate set can be designed if that of U{S) was given. The construction of the quantum 
circuit for U{S) was accomplished by employing Lemma 2 and Theorem 2, which 
were derived through dichotomy on the value of each qubit. We should emphasize 
that our work takes advantance of the non-uniqueness of the implementation of a 
quantum information processing. 

Also, we found another algorithm to perform the same database search (The- 
orem 3). One of the advantages of utilizing this is that we can reduce the circuit 
complexity considerably (Proposition 2). We showed that there existed a simple 
condition under which our algorithm was more advantageous than the conventional 
algorithm with the oracle Oconv('S') from the viewpoint of the circuit complexity. 

The modified oracle 0{S) fails to sort the targets with a good precision when 
noise and errors are present. This deviation from the targets will be circumvented 
to some extent by fault tolerant quantum error correction codes (QECC)^°, as 
in the case of the conventional sorting algorithm with Oconv('S'). QECC can be 
built-in in 0{S) similarly to Oconv('S'), since QECCs are independent of the system 
size and actual forms of quantum algorithms. Note, however, that the algorithm is 
probabilistic in nature. We have to verify the targets obtained to make sure that 
we got correct results. 
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Appendix. 

In this Appendix, we decompose the operator Oconv('5') into the elementary gates. 
To this end, we note that {x\y) S^y- Due to this orthogonality, we have 

Oeonv(5) = 1®« - 2 E.es = U.es (l^" " '^\^) i^D = H.es U^PUl (38) 

where Ux is a unitary operator satisfying 

Ux\0}^"^\x). (39) 

It is obvious that Ux is far from unique. Nonetheless, in view of Eq. ([2|), there exist 
local unitary operators satisfying Eq. ()39|) . e.g., 

ri-l 

t/. =(g)(l4.o + 'T,(5,,i)- (40) 

i=0 
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We estimate the circuit complexity of Oconv('S') using Eq. (|40)) . Since the number of 
(non-trivial) one-qubit gates to construct Ux is bounded by Xi < n from above, 
plugging this into the number of gates for P, we conclude that we need 0{n'^\S\) 
elementary gates to implement Oconv(»5'). 

Let us finally comment on the circuit complexity of Oconv(S'), where S is given by 
Eq. ([20l) . Since we have \S\ = \S\ and the upper bound of the circuit complexity of 
Ux is n, the circuit complexity is left unchanged even if we employ the decomposition 
P8|) for 5*. This observation implies that the circuit complexity cannot be improved 
by the method proposed in Sec. IV as far as the decomposition p8|) for Oconv(<S') 
is utilized. 
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